CVEvulnerability
CVE-2004-1969
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-04-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.
References
- http://marc.info/?l=bugtraq&m=108301983206107&w=2 marc.info
- http://secunia.com/advisories/11481 Vendor Advisory
- http://securitytracker.com/id?1009935 Vendor Advisory
- http://www.securityfocus.com/bid/10218 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15971 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=108301983206107&w=2 marc.info
- http://secunia.com/advisories/11481 Vendor Advisory
- http://securitytracker.com/id?1009935 Vendor Advisory
- http://www.securityfocus.com/bid/10218 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15971 exchange.xforce.ibmcloud.com